glacat[.]com

GlaCat.com is currently flagged for high-risk brand impersonation, specifically targeting the MetaMask brand. Analysis indicates that this domain is actively involved in social engineering tactics, as identified by Google Safe Browsing's categorization. The title displayed on the webpage, 'GlaCat 短網址 - 免費短網址服務', suggests a focus on URL shortening services, which can be leveraged to obfuscate malicious links and facilitate phishing attacks. Domain resolution points to the IP address 172.67.144.171, further indicating its active status since its creation on March 13, 2023.

This domain appears on five security blocklists, including those maintained by trusted security organizations such as SEAL and PhishDestroy. Additionally, threat intelligence platforms such as AlienVault OTX document this domain's presence in 14 distinct threat intelligence pulses, underscoring its frequent identification as a threat. A low trust score of 0/100 from Gridinsoft indicates a highly suspicious reputation in the cybersecurity community, while VirusTotal results show it being flagged by 16 out of 95 security vendors, reinforcing concerns about its legitimacy and security risks.

The SSL certificate is issued by Google Trust Services, but this does not mitigate the associated risks, as the use of SSL by malicious entities has become common. Defenders are advised to monitor this domain closely and block any attempts to redirect users to GlaCat.com, especially in contexts where MetaMask is mentioned. Continued vigilance in the monitoring of security feeds and preventive measures, such as user education on recognizing brand impersonation, are crucial in mitigating the associated risks posed by this domain.